Privacy notice

We take the protection of your personal data seriously. This notice describes which data this website processes, for which purposes and with which safeguards. It applies only to this website: if you follow a link to another site, that site’s own notice applies.

Data controller

Bruni Consulting 5.0
VAT ID IT04003320795
Registered office: 39057 Appiano sulla Strada del Vino (BZ), Italy
Phone: +39 388 817 5997
E-mail: info@bruni-consulting.eu
Certified e-mail (PEC): bruni.consulting@mypec.eu

For any request concerning your personal data you can contact the controller using the details above.

Data processed, purposes and legal bases

Browsing data. The site is hosted on the Tilda platform. On every visit the server records technical data (IP address, date and time, requested page, browser and device type, referring page). Purpose: delivering the site, keeping it secure and diagnosing errors. Legal basis: the controller’s legitimate interest (Art. 6(1)(f) GDPR). Retention: only as long as strictly necessary, usually a few days; longer only in case of security incidents.

Online NIS2 assessment. If you complete the assessment we process your name, company, e-mail, sector, number of employees, the answers to the 45 questions and the resulting score. Purpose: preparing the PDF report, assessing your needs and contacting you. Legal basis: consent (Art. 6(1)(a) GDPR), requested before you start and revocable at any time. Retention: as long as necessary and in any case no longer than 12 months from collection, unless a contractual relationship begins. The data are transmitted to Bruni Consulting 5.0 through the forms of the Tilda platform.

Booking a consultation. The booking button leads to the cal.com page, where you enter your name, e-mail and chosen date. Purpose: managing the booking and the consultation. Legal basis: pre-contractual measures at your request (Art. 6(1)(b) GDPR). The cal.com service operates under its own notice.

Direct contact. If you write to us by e-mail, phone or WhatsApp we process the data you give us in order to answer your request (Art. 6(1)(b) or (f) GDPR). Links to social channels and to WhatsApp are simple links: processing by those services takes place only after you click, under their own notices.

Usage statistics (Google Analytics 4). Only with your consent to the “Statistics” category does the site load Google Analytics 4 from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Without consent the script is not loaded and no measurement data are collected. Data: pages visited, duration, origin, device and browser type, approximate location; the IP address is anonymised. Cookies: _ga and _ga_NW97FGJEBK (up to 2 years). Measurement ID: G-NW97FGJEBK. Retention: no longer than 14 months. Legal basis: consent (Art. 6(1)(a) GDPR). You can change or withdraw your choice at any time with the “Manage cookies” button in the footer.

Technical cookies. The site uses one technical cookie (cc_cookie) that stores your cookie choice for 180 days. We do not use marketing or profiling cookies. The typeface (Inter) is hosted on our own site and is not loaded from Google servers. More details in the cookie policy.

Recipients of the data

Data may be processed, as processors or independent controllers, by the providers we rely on: the hosting and forms platform (Tilda), the booking service (cal.com) and, only with your consent, Google Ireland Limited for statistics. Data are not passed on to third parties unless required by law.

Transfers outside the EEA

Some providers may process data outside the European Economic Area (for example Google LLC in the United States). In that case the transfer relies on an adequacy decision, such as the EU–U.S. Data Privacy Framework, or on standard contractual clauses. There is no automated decision-making or profiling (Art. 22 GDPR).

Security measures

Data are protected by appropriate technical and organisational measures. Transmission takes place exclusively over encrypted connections (HTTPS).

Your rights

You may exercise at any time the rights provided for in Articles 15–22 GDPR: access, rectification, erasure, restriction, objection, portability and withdrawal of consent (without affecting processing carried out before withdrawal). Write to info@bruni-consulting.eu.

Complaints

You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome (garanteprivacy.it).

Last updated: 26 October 2026.